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DETAILED ACTION 

1 . This Action is in regards to the Amendment and Response received on 1 1 November 
2004. 

2. The application has been examined. Claims 1-14 and 16-26 are pending. The objections 
and rejections cited are as stated below: 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claims 1-4, 7-11, 13, 14, 17, 18, 20, 21, 24 and 25 are rejected under 35 U.S.C. 103(a) 

as being unpatentable over Lakshman et al. (Lakshman), U.S. Patent No. 6,341,130 in view of 
Barzilai et al. (Barzilai), "Design and Implementation of an RSVP-Based Quality of Service 
Architecture for an Integrated Services Internet", 1998 and in further view of Engler et al., 
"DPF:Fast, Flexible Message Demultiplexing using Dynamic Code Generation, Copyright 1996. 

5. Regarding claim 1, Lakshman discloses the invention substantially as claimed. Lakshman 
discloses an apparatus adapted to facilitate communications between a client device and a 
remote device, comprising a network interface including (i) filters including at least one filter 
being triggered to denote when a received packet satisfies filter criteria corresponding to an 
admission policy (filter rules) related to differentiated service levels and associated with the at 
least one filter [see Lakshman, Col. 1, lines 53-67, Col. 2, lines 1-34, Col. 3, lines 53-55, Col. 6, 
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lines 15-19, Col. 9, lines 20-29] and (ii) a classifier, communicatively coupled to the filters, to 
classify and mark one of the service levels associates with the received data packet in response 
to satisfying the filter criteria associated with the at least one filter [see Lakshman, Col. 53-67]; 
and a controller [see Lakshman, Figure, 1, item 245]. However, Lakshman does not explicitly 
disclose a controller coupled to the network interface, to dynamically create and remove the 
filters controlling access to the different service levels based, at least in part, on an admission 
profile of the admission policy. 

6. In the same field of endeavor, Barzilai discloses (e.g., a system for traffic policing, traffic 
shaping and buffer management for QOS support). Barzilai discloses and a controller coupled to 
the network interface, to dynamically create and remove the filters controlling access to the 
different service levels based, at least in part, on an admissions profile (Barzilai teaches the QOS 
manager functions a control plane component primarily responsible for the creation, 
modification, and removal of reservation filters associated with different flows as well as 
admission control. Also, Barzilai teaches the improvement of statically compiled packet filter by 
utilizing a general classifier for real-time packet forwarding and packet filters that provide 
general and flexible classification of incoming packets to application endpoints and dynamic 
code generation techniques that are applied to realized very efficient packet filters), [see Barzilai, 
page 400, 2 nd column, 4 th paragraph, page 411, 2 nd column, 2 nd paragraph]. 

7. Accordingly, it would have been obvious to one of ordinary skill in the networking art at 
the time the invention was made to have incorporated Barzilai teaches of a system for traffic 
policing, traffic shaping and buffer management for QOS support with the teachings of 
Lakshman, for the purpose of providing a system that supports integrated services on the 



Application/Control Number: 09/222,340 Page 4 

Art Unit: 2143 

Internet, network routers as well as end hosts in order to further enhance classification of traffic 
and to handle data packets from different flows as well as having a system that fully supports 
TCP/IP stack [see Barzilai, page 397, column 2]. However, the specific of dynamic code 
generation in regards to dynamic filtering are not explicitly discloses by Lakeshman-Barzilai. 

8. In the same field of endeavor, Engler discloses (e.g., dynamic filtering). Engler 
discloses dynamic filtering [see abstract, sections 1, 2.1 and 3.1]. 

9. Accordingly, it would have been obvious to one of ordinary skill in the networking art at 
the time the invention was made to have incorporated Engler' s teachings of dynamic code 
generation for the creation of dynamic filtering with the teachings of Lakshman-Barzalai, for the 
purpose of providing an improvement on traditional packet filtering, through the use of dynamic 
code generation [see Engler, abstract]. Barzalai provides motivation to combine by stating the 
uses of dynamic code generation techniques that are applied provide for very efficient packet 
filtering [see Barzalia, pg. 41 1]. By this rationale claim 1 is rejected. 

10. Regarding claim 2, Lakshman-Barzilai and Engler further discloses wherein the at least 
one filter, when triggered, initiate an admission control decision preventing allocation of service 
level resources which are not yet required or authorized [see Barzilai, page 410, 2 nd paragraph]. 
The same motivation that was utilized in the combination of claim 1 applies equally as well to 
claim 2. By this rationale claim 2 is rejected. 

11. Regarding claim 3, Lakshman-Barzilai and Engler further discloses wherein each filter is 
triggered by information contained within received the data packet (Barzilai teaches that the 
address is used during data transfer to efficiently identify the reservation structure to use for 
policing and shaping traffic on a particular data socket), [see Barzilai, Page 404, 1 st Col, 2 nd 
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paragraph]. The same motivation that was utilized in the combination of claims 1 and 2 applies 
equally as well to claim 3. By this rationale claim 3 is rejected. 

12. Regarding claim 4, Lakshman-Barzilai and Engler further discloses wherein each filter is 
triggered by one or both of packet source information and packet destination information [see 
Lakshman, Col. 2, lines 10-14]. By this rationale claim 4 is rejected. 

13. Regarding claim 7, Lakshman-Barzilai and Engler further discloses wherein the 
admission profile is available locally within the apparatus [see Lakshman, Col. 15, line 13]. By 
this rationale claim 7 is rejected. 

14. Regarding claim 8, Lakshman-Barzilai and Engler further discloses wherein the 
controller establishes an ingress profile in response to detecting an associated trigger event, 
wherein the ingress profile modifies the received data packet adhering to the filter criteria to 
denote a particular service level, in accordance with the admissions profile [see Barzilai, page 
406, 2 nd ]. The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 8. By this rationale claim 8 is rejected. 

15. Regarding claim 9, Lakshman-Barzilai and Engler further discloses wherein the 
controller removes ingress profiles when data packets adhering to the filter criteria are no longer 
received, liberating apparatus resources [see Barzilai, page 406, 2 nd column, 4 th paragraph]. The 
same motivation that was utilized in the combination of claims 1 and 8 applies equally as well to 
claim 9. By this rationale claim 9 is rejected. 

16. Regarding claim 10, Lakshman-Barzilai and Engler further discloses wherein the 
controller removes ingress profiles after a predetermined period of time, liberating apparatus 
resources [Barzilai, page 410, 1st column, 1 st paragraph-3 rd paragraph]. The same motivation 
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that was utilized in the combination of claims 1 and 8 applies equally as well to claim 10. By 
this rationale claim 10 is rejected. 

17. Regarding claim 11, Lakshman-Barzilai and Engler further discloses wherein the 
controller removes at least one of the filters in accordance with a network administration policy 
[see Barzilai, page 410, 1st column, paragraph 1, Figure 9]. The same motivation that was 
utilized in the combination of claim 1 applies equally as well to claim 1 1 . By this rationale 
claim 11 is rejected. 

18. Regarding claim 13, Lakshman-Barzilai and Engler further discloses a method for 
controlling provisions of differentiated service levels in a data network [see Barzilai, abstract], 
the method comprising (a) installing a filter on a network edge device to provide a trigger 
notification upon detecting data packets adhering to filter criteria, [see rejection of claim 1, 
supra] (b) determining whether a received data packet satisfies the filter criteria, the filter 
criteria corresponding to an admission policy related to the differentiated service levels [see 
rejection of claim 1, supra]; and (c) issuing a command by a bandwidth broker to a controller of 
the network edge device to dynamically install or remove a filter in response to determining 
whether the received data packets satisfies the filter criteria [see rejection of claim 1, supra]. The 
same motivation that was utilized in the combination of claim 1 applies equally as well to claim 
13. By this rationale claim 13 is rejected. 

19. Regarding claim 14, Lakshman-Barzilai and Engler further discloses (d) marking the 
received data packets adhering to the filter criteria according to a subscribed service level 
(Barzilai teaches that the QOS manager tags the data path with a session handle to enable 
handling of data packets commensurate with their service requirements), [see Barzilai, page 398, 
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1 st column, 1 st paragraph]. The same motivation that was utilized in the combination of claims 1 
and 13 applies equally as well to claim 14. By this rationale claim 14 is rejected. 

20. Regarding claim 17, Lakshman-Barzilai and Engler further discloses (e) identifying and 
marking the received data packets with routing information in accordance with the subscribed 
service level [see rejection of claim 14, supra]. The same motivation that was utilized in the 
combination of claims 1,13 and 14 applies equally as well to claim 17. By this rationale claim 
17 is rejected. 

21 . Regarding claim 18, Lakshman-Barzilai and Engler further discloses (f) placing the data 
packets in a proper format for transmission (Barzilai teaches TCP formats packets into a 
acceptable form for transmission to the network), [see Barzilai, page 407, 2 nd column, 2 nd 
paragraph]. The same motivation that was utilized in the combination of claims 1, 13, 14, and 17 
applies equally as well to claim 18. By this rationale claim 18 is rejected. 

22. Regarding claim 20, Lakshman-Barzilai and Engler further discloses wherein the 
controller further dynamically controls access to at least one classifier profile in accordance with 
the admission profile [see Barzilai, page 41 1, 2 nd column, 2 nd paragraph]. The same motivation 
that was utilized in the combination of claims 1 and 13 applies equally as well to claim 20. By 
this rationale claim 20 is rejected. 

23. Regarding claim 21, Lakshman-Barzilai and Engler further discloses an apparatus 
adapted to facilitate communications between a client device and a remote device [see rejection 
of claim 1, supra], comprising: filter means for controlling access to different service levels [see 
rejection of claim 1, supra]; means for classifying and marking one of the service levels 
associated with the received data packet in response to satisfying filter criteria associates with the 
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filter means [see rejection of claim 1, supra]; and control means for dynamically creating and 
removing a portion of the filter means based at least in part on an admission profile [see rejection 
of claim 1, supra]. The same motivation that was utilized in the combination of claim 1 applies 
equally as well to claim 21. By this rationale claim 21 is rejected. 

24. Regarding claim 24, Lakshman-Barzilai and Engler further discloses wherein the filter 
means comprises a plurality of filters [see rejection of claims 1 and 21, supra]. By this rationale 
claim 24 is rejected. 

25. Regarding claim 25, Lakshman-Barzilai and Engler further discloses wherein the control 
means removes at least one of the filters in accordance with a network administration policy [see 
Barzilai, page 400, 2 nd column, 4 th paragraph]. The same motivation that was utilized in the 
combination of claims 1 and 24 applies equally as well to claim 25. By this rationale claim 25 is 
rejected. 

Claim Rejections - 35 USC § 103 

26. Claims 5, 6, 16, 19, 22, 23 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Lakshman-Barzilai as applied to claims 1, 13 5 14, 21 above, and further in view of Gai et al. 
(Gai), U.S. Patent No. 6,651,101. 

27. Regarding claim 5, Lakshman-Barzilai and Engler discloses the invention substantially . 
as claimed. However, Lakshman-Barzilai does not explicitly disclose wherein the admission 
profile is stored in a communicatively coupled remote device. 

28. In the same field of endeavor, Gai discloses (e.g., identifying network data traffic flows 
and for applying quality of service treatments to the flows). Gai discloses wherein the admission 
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profile is stored in a communicatively coupled remote device [see Gai, Col. 12, lines 25-50 and 
Col. 15, lines 59-64]. 

29. Accordingly, it would have been obvious to one of ordinary skill in the networking art at 
the time the invention was made to have incorporated Gai's teachings of identifying network 
data traffic flows and for applying quality of service treatments to the flows with the teachings of 
Lakshman-Barzilai, for the purpose of obtaining traffic policies to be applied to identified traffic 
flows [see Gai, Col. 4, lines 26-65]. By this rationale claim 5 is rejected. 

30. Regarding claim 6, Lakshman-Barzilai, Engler and Gai further discloses wherein the 
communicatively coupled remote device is a bandwidth broker or other generic policy server 
[see Gai, Figure 2, item 216]. The same motivation that was utilized in the combination of claim 
5 applies equally as well to claim 6. By this rationale claim 6 is rejected. 

31. Regarding claim 16, Lakshman-Barzilai, Engler and Gai discloses wherein the marking 
of the received data packet includes setting a logic value of a bit in a Type of Service (ToS) field 
of a header of the data packet [see Gai, Col. 3, lines 1-32, Col. 16, lines 21-48 and Col. 20, lines 
25-31]. The same motivation that was utilized in the combination of claim 5 applies equally as 
well to claim 16. By this rationale claim 16 is rejected. 

32. Regarding claim 19, Lakshman-Barzilai, Engler and Gai discloses wherein the classifier 
marks a Type of Service (ToS) field of the received data packet to denote a level of service for 
transmission of the data packet [see Gai, Col. 3, lines 1-32, Col. 16, lines 21-48 and Col. 20, 
lines 25-31]. The same motivation that was utilized in the combination of claim 5 applies 
equally as well to claim 19. By this rationale claim 19 is rejected. 
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33. Regarding claim 22, Lakshman-Barzilai, Engler and Gai further discloses wherein the 
admissions profile is stored in a communicatively coupled remote device [see Gai, Col. 12, lines 
25-50]. The same motivation that was utilized in the combination of claim 5 applies equally as 
well to claim 22. By this rationale claim 22 is rejected. 

34. Regarding claim 23, Lakshman-Barzilai, Engler and Gai further discloses wherein the 
communicatively coupled remote device is a bandwidth broker or other generic policy server 
[see Gai, Figure 2, item 216]. The same motivation that was utilized in the combination of claim 
5 applies equally as well to claim 23. By this rationale claim 23 is rejected. 

Claim Rejections - 35 USC § 103 

35. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

36. Claims 12 and 26 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Lakshman-Barzilai and Engler as applied to claims 1, 1 1, 21, 24 and 25 above, and further in 
view of in view of what was well known to the ordinary artisan in the networking art at the time 
the invention was made. 

37. Regarding claims 12 and 26, Lakshman-Barzilai and Engler further discloses wherein 
the control means removes at least one of the filters based, at least in part, on time-ofday ((The 
inclusion of wherein the control means removes at least one of the filters based, at least in part, 
on time-of-day would have been obvious to one of ordinary skill in the networking art at the time 
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the invention was made in view of the notoriously widely known and widely implementation of 
control means removes at least one of the filters based, at least in part, on time-of-day. The 
Examiner takes Official Notice (MPEP 2144.03) that "a network administrator having the 
capability to remove filters base on an expiration day or time of data is well known in the 
networking art at the time the invention. The Applicant is entitled to traverse the official notice 
according to MPEP 2144.03. However, MPEP 2144.03 further states, "See also In re Boon, 439 
F.2d 724, 169 USPQ 231 (CCPA 1971) (a challenge to the taking of judicial notice must contain 
adequate information or argument to create on its face a reasonable doubt regarding the 
circumstances justifying the judicial notice)." Specifically, In re Boon, 169 USPQ 231, 234 
states "as we held in Ahlert, an applicant must be given the opportunity to challenge either the 
correctness of the fact asserted or the notoriety or repute of the reference cited in support of the 
assertion. We did not mean to imply by this statement that a bald challenge, with nothing more, 
would be all that was needed". Further 37 CFR 1 .671©(3) states "Judicial notice means official 
notice". Thus, a traversal by the Applicant that is merely "a bald challenge, with nothing more" 
will be given little weight). By this rationale claims 12 and 26 are rejected. 



Claim Rejections - 35 USC § 103 
38. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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39. Claims 1-14 and 16-26 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Lakshman et al. (Lakshman), U.S. Patent No. 6,341,130 in view of Mitchem et al. (Mitchem), 
U.S. Patent No. 6,209,101. 

40. Regarding claim 1, Lakshman discloses the invention substantially as claimed. Lakshman 
discloses an apparatus adapted to facilitate communications between a client device and a 
remote device, comprising a network interface including (i) filters including at least one filter 
being triggered to denote when a received packet satisfies filter criteria corresponding to an 
admission policy (filter rules) related to differentiated service levels and associated with the at 
least one filter [see Lakshman, Col. 1, lines 53-67, Col. 2, lines 1-34, Col. 3, lines 53-55, Col. 6, 
lines 15-19, Col. 9, lines 20-29] and (ii) a classifier, communicatively coupled to the filters, to 
classify and mark one of the service levels associates with the received data packet in response 
to satisfying the filter criteria associated with the at least one filter [see Lakshman, Col. 53-67]; 
and a controller [see Lakshman, Figure, 1, item 245]. However, Lakshman does not explicitly 
disclose a controller coupled to the network interface, to dynamically create and remove the 
filters controlling access to the different service levels based, at least in part, on an admission 
profile of the admission policy. 

41 . In the same field of endeavor, Mitchem discloses (e.g., adaptive security system having 
hierarchy of security servers). Mitchem discloses dynamically create and remove the filters 
controlling access to the different service levels based, at least in part, on an admission profile of 
the admission policy (Mitchem teaches dynamic creation and termination of security servers, 
whereas these security servers can be tailored to implement a security policy unique to the 
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corresponding task (service level), [see Mitchem, abstract, Col. 2, lines 39-57, Col. 4, lines 6-67, 
Col. 5, lines 1-67]. 

42. Accordingly, it would have been obvious to one of ordinary skill in the networking art at 
the time the invention was made to have incorporated Mitchem's teachings of a adaptive security 
system having hierarchy of security servers with the teachings of Lakshman, for the purpose of 
providing each security server that can utilize a unique security policy to a corresponding tasks 
through the use of dynamic creation and termination of a security server [see Mitchem, Col. 4, 
lines 6-17, Col. 6, lines 60-67 and Col. 7, lines 1-5]. By this rationale claim 1 is rejected. 

Response to Arguments 

43. Applicant's arguments filed on 1 1 November 2004 have been carefully considered but 
they are not deemed fully persuasive. However, because there exists the likelihood of future 
presentation of this argument, the Examiner thinks that it is prudent to address applicants' main 
points of contention. 

A. Applicant argues that none of the prior art renders (1) obvious a controller to 
dynamically create and remove the filters controlling access to the different service 
levels, and (2) satisfying filter criteria corresponding to an admission policy related to 
differentiated service levels. 

B. Applicant states that the Office Action apparently uses Engler as a hindsight 
reconstruction of the claimed invention. 

C. Applicant argues that Gai teaches away from the claimed invention by teaching 
storing policies in a local memory, not a remote device. 
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D. Applicant request support of the Official Notice taken by the Examiner regarding 
44. Regarding "Point A", that none of the prior art renders (1) obvious a controller to 
dynamically create and remove the filters controlling access to the different service levels, and 
(2) satisfying filter criteria corresponding to an admission policy related to differentiated service 
levels. It is position of the Examiner that in combination Lakshman-Barzilai and Engler do in 
fact teach this limitation. Lakshman-Barzilai and Engler teaches in order to perform a forwarding 
function, the router receives a data packet at an input link and a control mechanism (controller) 
within the router utilizes an independently generated lookup table to determine to which output 
link the packet should be routed to [see Lakshman, Col. 1, lines 35-45]. Lakshman-Barzilai and 
Engler also teaches that a QOS manager functions a control plane component primarily 
responsible for the creation, modification, and removal of reservation filters associated with 
different flows as well as admission control. Also, Barzilai teaches the improvement of statically 
compiled packet filter by utilizing a general classifier for real-time packet forwarding and packet 
filters that provide general and flexible classification of incoming packets to application 
endpoints and dynamic code generation techniques that are applied to realized very efficient 
packet filters, [see Barzilai, page 400, 2 nd column, 4 th paragraph, page 41 1, 2 nd column, 2 nd 
paragraph]. Furthermore, Lakshman-Barzilai and Engler teaches that the interface supports 
admission control (packet filtering) and scheduling and is able to differentiate between different 
service categories [see Barzilai, page 403, 1 st column, 4 th paragraph]. Lakshman-Barzilai and 
Engler teaches dynamic code generation techniques are applied to realize very efficient form of 
packet filters [see Barzilai, page 41 1, 2 nd column, 2 nd paragraph]. 
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45. Regarding "Point B", that the Office Action apparently uses Engler as a hindsight 
reconstruction of the claimed invention. In response to applicant's argument that the examiner's 
conclusion of obviousness is based upon improper hindsight reasoning, it must be recognized 
that any judgment on obviousness is in a sense necessarily a reconstruction based upon hindsight 
reasoning. But so long as it takes into account only knowledge which was within the level of 
ordinary skill at the time the claimed invention was made, and does not include knowledge 
gleaned only from the applicant's disclosure, such a reconstruction is proper. See In re 
McLaughlin, 443 F.2d 1392, 170 USPQ 209 (CCPA 1971). 

46. Regarding "Point C", that Gai teaches away from the claimed invention by teaching 
storing policies in a local memory, not a remote device. Eventhough, Gai teaches storing 
policies in a local memory. Gai further teaches that information may be obtained from a 
repository that is remote from the local enforcer [see Gai, Col. 15, lines 59-64]. 

47. Regarding "Point D", of Applicant's seasonable challenge to the Official Notice 
concerning a "the controller removes at least one of the filters based, at least in part, on time-of- 
day. In response to those concerns Wiegel clearly shows that this feature was notoriously well 
known in the prior art [see Wiegel, Figure 4A-4G]. 

48. 

Conclusion 

49. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

A. Verma, U.S. Patent No. 6,581093, teaches storing policies remotely [see Verma, Col. 
1, lines 5-9]. 
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Conclusion 

50. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to William C. Vaughn, Jr. whose telephone number is (571) 272- 
3922. The examiner can normally be reached on 8:00-6:00, 1st and 2nd Friday Off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, David A Wiley can be reached on (571) 272-3923. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 

system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 

) ) 



system, contact the Electronic Business Center (EBC) at 866-217^9197 (toll-free) 
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